 A cyber-expert told The Sun: "This is the latest in a disturbing string of hidden malware in the Google Play store." In further bad news, the Android app actually makes itself intentionally difficult to delete. Cyber-experts say that you need to search your phone straight away and uninstall it. . The app is called Todo: Day Manager, and has been slammed by security specialists ( Google) "Our analysis found that the Xenomorph banking malware is dropped from GitHub as a fake Google Service application upon installation of the app," said the Zscaler cyber-experts. "It starts with asking users to enable access permission. "Once provided, it adds itself as a device admin and prevents users from disabling Device Admin, making it uninstallable from the phone." If you don't have permissions to the app then you should be able to uninstall it safely. Otherwise, you may need to back up your files and then factory-reset your phone to clear the app completely. Cyber expert Chris Hauk offered further advice on avoiding faulty Android Apps. It installs a){kind=link}
The Todo: Day Manager app can intercept your two-factor verification codes, which are typically sent via text, as well as your bank account
Android phone owners are being warned about a dangerous app that steals your banking login.
According to cyber-experts, you must check your phone straight away, to check you haven’t been infiltrated.
The app, which is called Todo: Day Manager, implements a banking trojan malware called Xenomorph, researchers at Zscaler ThreatLabz have said.
This can hijack your login information from banking apps, and might even be able to decipher your SMS messages.